Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0cf7744aaf5c22b0c6a8f62004fef760.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0cf7744aaf5c22b0c6a8f62004fef760.exe
Resource
win10v2004-20231025-en
General
-
Target
NEAS.0cf7744aaf5c22b0c6a8f62004fef760.exe
-
Size
14KB
-
MD5
0cf7744aaf5c22b0c6a8f62004fef760
-
SHA1
80326ebca97c3c669c204ddc97829529e366b09b
-
SHA256
b891ad6e89b47e0473d62e57c238c434ccb9e1e1890a4c7b1a9960f9db120ad3
-
SHA512
f33a5163f286d1b7b1da9997babf867684f30b79f560a0b090848fe683bd6b0dec66cab3a60b94b3538f64f39980afc59f86e4b8eaa3a37bb95b249607235fb8
-
SSDEEP
384:KGlBev6WgHp+SIHUIWobRhXxDE045Hx6hx6hx6hx:9msJ+jHU8LXBA32x2x2x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.0cf7744aaf5c22b0c6a8f62004fef760.exe
Files
-
NEAS.0cf7744aaf5c22b0c6a8f62004fef760.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ